Alternatives and similar repositories for DLLoader

Users that are interested in DLLoader are comparing it to the libraries listed below

• lab52io / StealAllTokens
  This PoC uses two diferent technics for stealing the primary token from all running processes, showing that is possible to impersonate a…
  ☆55Updated 3 years ago
• varwara / CVE-2024-21338
  PoC for the Untrusted Pointer Dereference in the appid.sys driver
  ☆16Updated last year
• Allevon412 / ReflectiveDLLInjector
  This program is used to perform reflective DLL Injection to a remote process specified by the user.
  ☆65Updated last year
• florylsk / NtDump
  Indirect NT syscalls LSASS dumper.
  ☆44Updated last year
• Hagrid29 / herpaderply_hollowing
  Herpaderply Hollowing - a PE injection technique, hybrid between Process Hollowing and Process Herpaderping
  ☆56Updated 2 years ago
• oXis / DoublePulsarPayload
  C++ implementation of DOUBLEPULSAR usermode shellcode. Yet another Reflective DLL loader.
  ☆30Updated 3 years ago
• ProcessusT / PsNotifRoutineUnloader
  This script is used to unload PsSetCreateProcessNotifyRoutineEx, PsSetCreateProcessNotifyRoutine, PsSetLoadImageNotifyRoutine and PsSetCr…
  ☆63Updated last year
• NUL0x4C / ManualRsrcDataFetching
  Get your data from the resource section manually, with no need for windows apis
  ☆62Updated 6 months ago
• bananabr / Givemeahand
  A PoC tool for exploiting leaked process and thread handles
  ☆31Updated last year
• benheise / TitanLdr
  Titan: A crappy Reflective Loader written in C and assembly for Cobalt Strike. Redirects DNS Beacon over DoH
  ☆48Updated 3 years ago
• thefLink / Memfiddler
  Executes shellcode from a remote server and aims to evade in-memory scanners
  ☆31Updated 5 years ago
• Kara-4search / ThreadHijacking_CSharp
  Process inject technique "Thread hijacking" via csharp
  ☆14Updated 3 years ago
• OtterHacker / CoffLoader
  ☆54Updated 2 years ago
• AlionGreen / apc-injection
  Process Injection: APC Injection
  ☆32Updated 4 years ago
• SolomonSklash / netntlm
  A crappy hook on SpAcceptLsaModeContext that prints incoming auth attempts. WIP
  ☆34Updated 3 years ago
• aaaddress1 / knownDlls_Poison
  ☆26Updated 3 years ago
• Yaxser / Itaskhandler
  Implementation of ITaskHandler in C++
  ☆13Updated 2 years ago
• plackyhacker / Unhook-BitDefender
  Unhooks Bit Defender from NTDLL and KERNELBASE using a classic technique.
  ☆54Updated last year
• zha0gongz1 / weakenDefenderPriv
  Without closing windows defender, to make defender useless by removing its token privileges and lowering the token integrity.
  ☆32Updated 3 years ago
• Coldzer0 / TinyPDBParser
  Windows PDB Parser using Imagehlp library.
  ☆16Updated 2 years ago
• GetRektBoy724 / SharpLoadLibrary
  An attempt to make a LoadLibrary designed for offensive operations, in C# obviously.
  ☆55Updated 3 years ago
• passthehashbrowns / DInvokeProcessHollowing
  ☆28Updated 4 years ago
• TheKevinWang / HellsRunPE
  RunPE using Hell's Gate technique.
  ☆32Updated 4 years ago
• PorLaCola25 / ProcessDoppelganging
  Process doppelganging POC using direct system calls, PPID spoofing and dropbox as an external delivery channel for the payload.
  ☆14Updated 4 years ago
• jbaines-r7 / dellicious
  Enabled / Disable LSA Protection via BYOVD
  ☆68Updated 3 years ago
• MastMind / PE-infector
  Crossplatform tool for inject shellcode into .exe and .dll binaries (x86 and x64)
  ☆59Updated last year
• PorLaCola25 / PPID-Spoofing
  POC of PPID spoofing using NtCreateUserProcess with syscalls to create a suspended process and performing process injection by overwritti…
  ☆40Updated 3 years ago
• fin3ss3g0d / HookFinder
  Simple PoC to locate hooked functions by EDR in ntdll.dll
  ☆36Updated last year
• frkngksl / HintInject
  A PoC project for embedding shellcode to Hint/Name Table
  ☆111Updated 3 years ago
• m417z / thread-call-stack-scanner
  Safely manage the unloading of DLLs that have been hooked into a process. Context: https://github.com/KNSoft/KNSoft.SlimDetours/discussio…
  ☆76Updated 2 weeks ago